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DETAILED ACTION 

This is in response to application filed on Feb. 18, 2004 in which claims 1-35 are presented for 
examination. 

Information Disclosure Statement 

The information disclosure statement filed on 05/08/04 is in compliance with the provisions of 
37 CFR 1 .97, 1 .98 and MPEP § 609. Because it has been placed in the application file, and the 
information referred to therein has been considered as to the merits. 

Claim Objections 

Claims 1 and 24 are objected to because of the following informalities: 

In claim 1 line 3, it is suggested to change "a core data set" to —the the core 

data set—; and line 8, "the core" to —the core data set- 
In claim 4 line 5, it is suggested to change "the core" to —the core data set- 
In claim 24 line 10, it is suggested to change "the association" to —an 

association— Appropriate correction is required. 

Claim Rejections - 35 USC §112 

The following is a quotation of the second paragraph of 35 U.S.C. 112: 



The specification shall conclude with one or more claims particularly pointing out and distinctly 
claiming the subject matter which the applicant regards as his invention. 
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Claim1-35 are rejected under 35 U.S.C. 112, second paragraph, as being 
indefinite for failing to particularly point out and distinctly claim the subject matter which 
applicant regards as the invention. 

Regarding claims 1-23, the preamble recites a method of configuring data for 
access by a user, however, in the body the claims are silent on the required step to 
configuring data for access. What the realized is to store the separate the core data 
set and the role-specific data set. That, therefore, renders the claims vague and 
indefinite. 

Regarding claims 32-35, the claims are silent on the required step to realize a 
system for organizing business data. What the realized is a security system for 
distributing access right, which is different to a system for organizing business data. 
That, therefore, renders the claims vague and indefinite. 

Claims 1, 3, 4, 6, 7, 9, 17, 19-23, 26, 27, 30, and 31 recite pronoun "that" is not 
permitted in the claim. Correction is required. 

Claim 32 recites pronoun "it" is not permitted in the claim. Correction is required. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form 
the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 
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(e) the invention was described in (1) an application for patent, published under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 



Claims 1-35 are rejected under 35 U.S.C. 102(e) as being anticipated by anticipated by Win et al. 
(US 6453353) (hereafter Win). 

Regarding claim 1, Win discloses: A computer-implemented method of configuring data 
for access by a user, comprising: obtaining a core data set (user name and password) that 
represents a constituent (user enters the name and password into the login page using browser, 
col. 9, lines 40-67, Win); 

obtaining a role-specific data set that represents a role assumed by the constituent (Roles 
that users play when working for an organization or doing business with an enterprise, col. 5, 
lines 13-56, Win); 

storing the core and role-specific data sets so as to distinguish the core data set from the 
role-specific data set (storing the core in user cookie and storing role-specific data in roles 
cookie, col. 10, lines 51 to col. 11, lines 10, Win). 

Regarding claim 2, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: wherein storing comprises storing the core data set 
and the role-specific data set separate from one another (storing the core in user cookie and 
storing role-specific data in roles cookie, col. 10, lines 51 to col. 11, lines 10, Win). 
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Regarding claim 3, all the limitations of this claim have been noted in the rejection of 
claim 2 above. In addition, Win discloses: wherein obtaining a role-specific data set further 
comprises obtaining a role-specific data set that only contains data that is different than the data 
stored in the core data set (storing the core in user cookie and storing role-specific data in roles 
cookie, col. 10, lines 51 to col. 11, lines 10, Win). 

Regarding claim 4, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: further comprising: obtaining a second role-specific 
data set that represents a second role assumed by the constituent (storing the core in user cookie 
and storing role-specific data in roles cookie, col. 10, lines 51 to col. 11, lines 10, Win); and 
storing the core, role-specific and second role-specific data sets so as to distinguish the data sets 
from one another (storing the core in user cookie and storing role-specific data in roles cookie, 
col. 10, lines 51 to col. 11, lines 10, Win). 

Regarding claim 5, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: further comprising storing the second role-specific 
data set so as to be separate from said role-specific data set and the core data set (storing the 
core in user cookie and storing role-specific data in roles cookie, col. 10, lines 51 to col. 11, 
lines 10, Win). 

Regarding claim 6, all the limitations of this claim have been noted in the rejection of 
claim 5 above. In addition, Win discloses: wherein obtaining a second role-specific data set 
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comprises obtaining a second role-specific data set that only contains data that is different than 
the data stored in the role-specific and core data sets (storing the core in user cookie and storing 
role-specific data in roles cookie, col. 10, lines 51 to col. 11, lines 10, Win). 

Regarding claim 7, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: wherein obtaining a role-specific data set that 
represents a role further comprises obtaining a role-specific data set that represents a role 
selected from the group consisting of customer, supplier, user, employee and contact (col. 5, 
lines 20-43, Win). 

Regarding claim 8, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: further comprising determining whether the user has 
access to the role-specific data set (col. 5, lines 44-54, Win). 

Regarding claim 9, all the limitations of this claim have been noted in the rejection of 
claim 8 above. In addition, Win discloses: wherein determining whether the user has access 
comprises filtering user access (user enters name and password) , based on a characteristic of 
the user , to a plurality of role-specific data sets that include said role-specific data set (col. 5, 
lines 65 to col. 6, lines 54, Win).. 

Regarding claim 10, all the limitations of this claim have been noted in the rejection of 
claim 9 above. In addition, Win discloses: wherein filtering user access comprises filtering user 
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access without requiring the user to log-in more than once per session of use (system provides a 
mechanism of single secure log in to Web resources, col. 5, lines 66 to col. 6, lines 9, Win). 

Regarding claim 1 1, all the limitations of this claim have been noted in the rejection of 
claim 9 above. In addition, Win discloses: wherein filtering based on a characteristic 
comprises filtering based on the identity of the user (enter user name and password, col. 5, lines 
66 to col. 6, lines 9, Win). 

Regarding claim 12, all the limitations of this claim have been noted in the rejection of 
claim 9 above. In addition, Win discloses: wherein filtering based on a characteristic comprises 
filtering based on a role assumed by the user (adding a role to a resource can give or take away 
access to that resource form all users with that role, col. 5, lines 60-62, Win). 

Regarding claim 13, all the limitations of this claim have been noted in the rejection of 
claim 9 above. In addition, Win discloses: wherein filtering based on a characteristic comprises 
filtering based on at least one security rule set by a system administrator (col. 7, lines 45-57 and 
col. 8, lines 47-63, Win). 

Regarding claim 14, all the limitations of this claim have been noted in the rejection of 
claim 9 above. In addition, Win discloses: wherein filtering base on a characteristic comprises 
filtering based on an agency relationship between the user and an organization (col. 5, lines 11- 
53, Win). 



Application/Control Number: 10/781,600 



Art Unit: 2161 



Page 8 



Regarding claim 15, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: further comprising creating an association between 
the role-specific data set and one or more organizational divisions within an enterprise (col. 5, 
lines 11-53, Win). 

Regarding claim 16, all the limitations of this claim have been noted in the rejection of 
claim 15 above. In addition, Win discloses: further comprising determining, based at least in 
part on the association, whether the user has access to the role-specific data set (col. 13, lines 
54-67, Win). 

Regarding claim 17, all the limitations of this claim have been noted in the rejection of 
claim 16 above. In addition, Win discloses: wherein determining whether the user has access 
comprises filtering user access, based at least in part on the association, to a plurality of role- 
specific data sets that includes said role-specific data set (col. 14, lines 5-19, Win). 

Regarding claim 18, all the limitations of this claim have been noted in the rejection of 
claim 17 above. In addition, Win discloses: wherein filtering user access comprises filtering 
user access without requiring the user to log-in more than once per session of use (col. 5, lines 
66 to col. 6, lines 9, Win). 
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Regarding claim 19, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: wherein obtaining a core data set that represents a 
constituent further comprises obtaining a core data set that represents an internal organization 
constituent (employee, staff member... col. 5, lines 21-33, Win). 

Regarding claim 20, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: wherein obtaining a core data set that represents a 
constituent further comprises obtaining a core data set that represents an external organization 
constituent (contractors, customers , supplier, col. 5, lines 21-33, Win). 

Regarding claim 21, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: wherein obtaining a core data set that represents a 
constituent further comprises obtaining a core data set that represents a constituent that is an 
individual person (col. 5, lines 21-33, Win). 

Regarding claim 22, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: wherein obtaining a core data set that represents a 
constituent further comprises obtaining a core data set having any one of a plurality of 
specialized formats (data entry forms, col. 14, lines 2-43, Win). 

Regarding claim 23, all the limitations of this claim have been noted in the rejection of 
claim 1 above. In addition, Win discloses: wherein obtaining a role-specific data set that 
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represents a role assumed by the constituent comprises obtaining a role-specific data set having 
a format that is customized to the role assumed by the constituent (data entry form that accepts 
information defining a role by a role identifier value, a role name, an associated functional 
group value and a description, Win). 

Regarding claim 24, Win discloses: A computer-implemented method for distributing 
access rights, comprising: receiving a set of log-in information (enter user name and password 
(col. 5, lines 65 to col 6, lines 9, Win); 

identifying, based on the log-in information, a contact record (col. 13, lines 8-34, Win); 

identifying an association between an organization record and the contact record (col. 13, 
lines 54-67, Win); and 

selectively providing access based at least in part on the association (col. 11, lines 41-64, 

Win). 

Regarding claim 25, all the limitations of this claim have been noted in the rejection of 
claim 24 above. In addition, Win discloses: wherein identifying an association comprises 
identifying an employment association between an individual affiliated with the contact record 
and an employer affiliated with the organization record (col. 5, lines 8-53, Win). 

Regarding claim 26, all the limitations of this claim have been noted in the rejection of 
claim 25 above. In addition, Win discloses: wherein selectively providing access further 
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comprises providing access to the organization record when the association is an indication that 
the individual is employed by the employer (col. 5, lines 40-54, Win). 

Regarding claim 27, all the limitations of this claim have been noted in the rejection of 
claim 26 above. In addition, Win discloses: wherein selectively providing access further 
comprises providing access to role-specific records related to the organization record when the 
association is an indication that the individual is employed by the employer (col. 5, lines 8-53, 
Win). 

Regarding claim 28, all the limitations of this claim have been noted in the rejection of 
claim 27 above. In addition, Win discloses: wherein providing access to role-specific records 
comprises selectively providing access to role-specific records based at least in part on a 
plurality of access security rules (col. 7, lines 45-57 and col. 8, lines 47-63, Win). 

Regarding claim 29, all the limitations of this claim have been noted in the rejection of 
claim 28 above. In addition, Win discloses: wherein selectively providing access to role- 
specific records based at least in part on a plurality of access security rules comprises 
selectively providing access to role-specific records based at least in part on a plurality of access 
security rules selectively configured by a system administrator (col. 7, lines 45-67, Win). 

Regarding claim 30, all the limitations of this claim have been noted in the rejection of 
claim 28 above. In addition, Win discloses: wherein selectively providing access to role- 
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specific records based at least in part on a plurality of access security rules comprises 
selectively providing access based at least in part on a plurality of access security rules that 
distribute access rights based on an identity characteristic of the individual (col. 8, lines 35-63, 
Win). 

Regarding claim 31, all the limitations of this claim have been noted in the rejection of 
claim 28 above. In addition, Win discloses: wherein selectively providing access to role- 
specific records based at least in part on a plurality of access security rules comprises 
selectively providing access based at least in part on a plurality of access security rules that 
distribute access rights based on a role assumed by the individual (col. 8, lines 35-63, Win). 

Regarding claim 32, Win discloses: A system for organizing business data for access by a 
user, the system comprising: 

a data management component (system 2 makes managing access simple based on an 
additive data model) for receiving data(register information sources or resource and published 
by a Web server) and distributing it into a plurality of constituent (users) and role-specific 
records (role may reflect a relationship of a user to the organization, col. 5, lines 1 1-65, Win); 

a constituent-role association component for maintaining a record of relationships 
between constituent and role-specific records (an administrator configure and maintain servers 
in system as col. 16, lines 30 to col. 17, lines 27, Win); and 
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a security subsystem for distributing access rights based at least in part on the record of 
relationships (col. 16, lines 63 to col. 17, lines 27, Win) . 

Regarding claim 33, all the limitations of this claim have been noted in the rejection of 
claim 32 above. In addition, Win discloses: wherein the security subsystem is further 
configured to distribute access rights based at least in part on a plurality of access security rules 
(col. 16, lines 3-28, Win). 

Regarding claim 34, all the limitations of this claim have been noted in the rejection of 
claim 33 above. In addition, Win discloses: wherein the access security rules are selectively 
established by a system administrator (col. 17, lines 5-37, Win). 

Regarding claim 35, all the limitations of this claim have been noted in the rejection of 
claim 33 above. In addition, Win discloses: wherein: the record of relationships includes a 
record of employer-employee relationships (col. 16, lines 3-58, Win); and 

the security subsystem is further configured to distribute access rights based at least in 
part on the record of employer-employee relationships(col. 16, lines 63 to col. 17, lines 27, 
Win). 



A 
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Contact Information 



Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to Cindy Nguyen whose telephone number is 571-272-4025. The examiner can 
normally be reached on M-F: 8:00-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Gaffin Jeffrey can be reached on 571-272-4190. The fax phone numbers for the organization where this 
application or proceeding is assigned are 703-872-9306 for regular communications and 703-872-9306 
for After Final communications. 

Any inquiry of a general nature or relating to the status of this application or proceeding should 
be directed to the receptionist whose telephone number is 703-305-3900. 



Cindy Nguyen 





September 26, 2006 



